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DETAILED ACTION 
Remarks 

1 . Claims 1 -32 are pending. 

Claim Rejections - 35 USC § 102 

2. Tlie following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
form the basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(e) the invention was described in (1) an application for patent, published under section 122(b), by 
another filed in the United States before the invention by the applicant for patent or (2) a patent 
granted on an application for patent by another filed in the United States before the invention by the 
applicant for patent, except that an international application filed under the treaty defined in section 
351(a) shall have the effects for purposes of this subsection of an application filed in the United States 
only if the international application designated the United States and was published under Article 21(2) 
of such treaty in the English language. 

3. Claims 1-32 are rejected under 35 U.S.C. 102(e) as being anticipated by 
Czaikowski (Patent Number 6,938,247 B2). 

As per claim 1 , Czaikowski teaches 

A method for isolating access by application programs to native resources 
provided by an operating system, the method comprising the steps of: (see abstract and 
background) 

(a) redirecting to an isolation environment comprising a user isolation scope and 
an application Isolation scope a request for a native resource made by a process 
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executing on behalf of a first user; (fields prone to interference are replicated and 
isolated for each application, column 13, lines 10-18) 

(b) locating an instance of the requested native resource in the user isolation 
scope on behalf of a first user; (proper instance accessed based on application identity, 
column 13, lines 5-8) 

and (c) responding to the request for the native resource using the instance of 
the required native resource located in the user isolation scope, (proper instance 
accessed based on application identity, column 13, lines 1-18; applications may include 
system services, column 12, lines 10-15) 

As per claim 2, Czaikowski teaches 

step (b) comprises failing to locate an instance of the requested native resource 
in the user isolation scope, (column 12, lines 22-35) 

As per claim 3, Czaikowski teaches 

step (c) comprises redirecting the request to the application isolation scope, 
(column 12,lines 36-46) 

As per claim 4, Czaikowski teaches . . 

(d) locating an instance of the requested native resource in the application 
isolation scope; (column 13, lines 25-30) 
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and responding to tlie request for tlie native resource using the instance of tlie 
requested native resource located In the application isolation scope, (column 13, lines 
20-30) 

As per claim 5, Czaikowski teaches 

step (e) comprises creating an instance of the requested native resource in the 
user isolation scope that corresponds to the instance of the requested native resource 
located in the application isolation scope and responding to the request for the native 
resource using the instance of the requested native resource created in the user 
isolation scope, (column 12, lines 19-37) 

As per claim 6, Czaikowski teaches 

step (d) comprises falling to locate an instance of the requested native resource 
in the application isolation scope, (column 13, lines 15-22) 

As per claim 7, Czaikowski teaches 

step (e) comprises responding to the request for the native resource using the 
system-scoped native resource, (column 13, lines 25-30) 

As per claim 8, Czaikowski teaches 

step (e) comprises: creating an instance of the requested native resource in the 
user isolation scope that corresponds to the instance of the requested resource located 
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in the system scope and responding to the request for the native resource using the 
instance of the resource created in the user isolation scope, (column 13, lines 20-30) 

As per claim 9, Czaikowsl<i teaches 

the step of hooking a request for a native resource made by a process executing 
on behalf of a first user, (column 13, lines 15-22) 

As per claim 1 0, Czaikowski teaches 

the step of intercepting a request for a native resource executing on behalf of a 
first user, (column 13, lines 1-18; column 12, lines 10-15) 

As per claim 1 1 , Czaikowski teaches 

the step of intercepting by a file system filter driver a request for a file system 
native resource executing on behalf of a first user, (column 13, lines 1-18; column 12, 
lines 10-15) 

As per claim 12, Czaikowski teaches 

step (a) comprises redirecting to an isolation environment comprising a user 
isolation scope and an application isolation scope a request for a file made by a process 
executing on behalf of a first user, (column 12, lines 19-37) 



As per claim 13, Czaikowski teaches 
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step (a) comprises redirecting to an isolation environment comprising a user 
Isolation scope and an application isolation scope a request for a registry database 
entry made by a process executing on behalf of a first user, (column 12, lines 19-37) 

As per claim 14, Czaikowski teaches 

(d) redirecting to the Isolation environment a request for the native resource 
made by a second process executing on behalf of a second user; (column 13, lines 1- 
18; column 12, lines 10-15) 

(e) locating an instance of the requested native resource in a second user 
isolation scope; (column 12, lines 48-60) 

(f) and responding to the request for the native resource using the instance of the 
native resource located in the second user isolation scope, (column 12, lines 48-60) 

As per claim 1 5, Czaikowski teaches 

the process executes concurrently on behalf of a first user and a second user, 
(column 1 1 , lines 34-45) 

As per claim 1 6, Czaikowski teaches 

step (e) comprises failing to locate an instance of the requested native resource 
in the second user isolation scope, (column 12, lines 19-37) 



As per claim 17, Czaikowski teaches 
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step (f) comprises redirecting the request to the application isolation scope, 
(column 12, lines 19-37) 

As per claim 1 8, Czaikowski teaches 

(d) locating an instance of the requested resource in the application isolation 
scope; (column 13, lines 1-18; column 12, lines 10-15) 

and (e) responding to the request for the native resource using the version of the 
native resource located in the application isolation scope, (column 13, lines 1-18; 
column 12, lines 10-15) 

As per claim 19, Czaikowski teaches 

(d) redirecting to the isolation environment a request for a native resource made 
by a second process executing on behalf of a first user; (column 12, lines 48-60) 

(e) locating an instance of the requested native resource in the user isolation 
scope; (column 12, lines 48-60) 

and (f) responding to the request for the native resource using the instance of the 
resource located in the user isolation scope, (column 12, lines 48-60) 

As per claim 20, Czaikowski teaches 

step (e) comprises failing to locate an instance of the requested native resource 
in the user isolation scope, (column 13, lines 1-18; column 12, lines 10-15) 
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As per claim 21 . Czaikowski teaches 

step (f) comprises redirecting the request to a second application isolation scope, 
(column 13, lines 1-18; column 12, lines 10-15) 

As per claim 22, Czaikowski teaches 

(d) locating an instance of the requested resource in the second application 
isolation scope; (column 13, jines 1-18; column 12, lines 10-15) 

and (e) responding to the request for the native resource using the instance of 
the native resource located in the second application isolation scope, (column 13, lines 
1-18; column 12, lines 10-15) 

As per claim 23, Czaikowski teaches 

An isolation environment for Isolating access by application programs to native 
resources provided by an operating system, the isolation environment comprising: (see 
abstract and background) 

a user isolation scope storing an instance of a native resource, the user isolation 
scope corresponding to a user; (fields prone to interference are replicated and isolated 
for each application, column 13, lines 10-18) 

and a redirector intercepting a request for the native resource made by a process 
executing on behalf of the user and redirecting the request to the user isolation scope, 
(proper instance accessed based on application identity, column 13, lines 1-18) 
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As per claim 24, Czaikowski teaches 

the isolation environment further comprises an application isolation. scope storing 
an instance of the native resource, (column 13, lines 1-18; column 12, lines 10-15) 

As per claim 25, Czaikowski teaches 

the isolation environment further comprises a second application isolation scope 
storing an instance of the native resource, (column 13, lines 1-18; column 12, lines 10- 
15) 

As per claim 26, Czaikowski teaches 

the redirector returns a handle to the requesting process that identifies the native 
resource, (column 13, lines 15-30) 

As per claim 27, Czaikowski teaches 

a rules engine specifying behavior for the redirector when redirecting the request, 
(column 13, lines 10-15) 

As per claim 28, Czaikowski teaches 

the redirector comprises a file system filter driver, (column 13, lines 30-45) 



As per claim 29, Czaikowski teaches 

the redirector comprises a function hooking mechanism, (column 13, lines 30t45) 
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As per claim 30, Czaikowsl^i teaches 

the function hooking apparatus intercepts an operation selected from the group 
of file system operations, registry operations, operating system services, packing and 
installation services, named object operations, window operations, file-type association 
operations and Component Object Model (COM) server operations, (column 12, lines 
10-15; column 1 3, lines 30-45) , 

As per claim 31 , Czaikowski teaches 

the application isolation environment further comprises a second user isolation 
scope storing a second, instance of the native resource, (column 13. lines 1-18; column 
12, lines 10-15) 

As per claim 32, Czaikowski teaches 

the application isolation environment further comprises a second user isolation 
scope storing an instance of the native resource, the second user isolation scope 
corresponding to a second user, (column 13, lines 1-18; column 12, lines 10-15) 
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Response to Arguments 

4. Applicant's arguments filed 6/1 1/2007 have been fully considered but they are 
not persuasive. 

With regards to Applicant's argument that Czaikowski does not disclose inter- 
process conflicts over operating system native resources, it is noted that Czaikowski 
discloses policy decisions concerning whether applications can write to a shared copy 
of system properties or if a separate copy is appropriate (column 14, lines 12-20). 
Therefore Czaikowski discloses the limitation. 

Conclusion 

5. The prior art made of record, listed on form PTO-892, and not relied upon is 
considered pertinent to applicant's disclosure. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Jay A. Morrison whose telephone number is (571) 272- 
71 12. The examiner can normally be reached on M-F 8-4:30. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Tim Vo can be reached on (571) 272-3642. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status infonmation for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 




TIMVO 

SUPERVISORY PATENT EXAMINER 
TCCHN0L06Y CENTER 21 00 



Jay Morrison 
TC2100 



Tim Vo 
TC2100 



